MAL-2026-6456

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/stitch-design/MAL-2026-6456.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-6456
Published
2026-06-25T07:10:10Z
Modified
2026-06-25T08:01:26.965920933Z
Summary
Malicious code in stitch-design (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (81a0c5de3abe7924f58304e27e1537821c217c9348c060b31c5424407f9f10cc)

The npm package ships a preinstall lifecycle hook (scripts/preinstall.js) that, on npm install, reads classic installer-secret paths — ~/.gitconfig, ~/.git-credentials, ~/.ssh/*.pub, ~/.npmrc, ~/.docker/config.json — and runs subprocesses (git config --global/--system user.email, gh api user, claude auth status, npm config get email) to capture identity material. It regex-extracts every email-shaped string from the contents and issues HTTPS GETs to https://stitch-design.ai/api/v1?src=...&user=<email> for each match, with TLS verification explicitly disabled (rejectUnauthorized: false). The same harvester is duplicated in bin/cli.js (the package's bin entry stitch-design), so every CLI invocation after install repeats the credential-path reads and exfiltration. Both files carry cover-story comments claiming to be a temporary placeholder that just prints a notice, while ~150 lines of harvesting and exfil code execute first. The combination of preinstall auto-execution, reads from canonical credential paths, hardcoded remote destination, disabled TLS verification, and a misleading placeholder narrative is an unambiguous installer-side credential exfiltration attack.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-06-25T07:47:52.186125658Z",
            "source": "amazon-inspector",
            "sha256": "15633b34e54b4c8192085292f5f5826221502c77c904ab0130fbfd9e605bd692",
            "versions": [
                "0.1.1"
            ],
            "id": "IN-MAL-2026-007498",
            "modified_time": "2026-06-25T07:10:10Z"
        },
        {
            "import_time": "2026-06-25T07:47:52.294044958Z",
            "source": "amazon-inspector",
            "sha256": "81a0c5de3abe7924f58304e27e1537821c217c9348c060b31c5424407f9f10cc",
            "versions": [
                "0.1.0"
            ],
            "id": "IN-MAL-2026-007499",
            "modified_time": "2026-06-25T07:10:16Z"
        }
    ]
}
References
Credits

Affected packages

npm / stitch-design

Package

Name
stitch-design
View open source insights on deps.dev
Purl
pkg:npm/stitch-design

Affected ranges

Affected versions

0.*
0.1.0
0.1.1

Database specific

indicators 
{
    "evidence_files": [
        {
            "tlsh": "2cc141b70aab233030d6e8ad974f5135a2abf1237505d5a0b81d73585fcd03856a1afe",
            "sha256": "70e8cae5ddc8a2f0b7d87e204d9e25193daf565c067d6f02163b128f3fbd3ac6",
            "path": "scripts/preinstall.js"
        }
    ],
    "package_integrity": [
        {
            "filename": "stitch-design-0.1.1.tgz",
            "hashes": {
                "sha1": "2a5ee21ffb314eb5b5ba6ae3bab65481f2906226",
                "sha512_sri": "sha512-EO0rQUV/z0bLtn5EcP3NQoHEzpIMe1o3+H3PSGITtAyVzpjw5mgRQdOf4TM9jqUEAJbZaCUxg/8pWbdEZ3vmFQ=="
            }
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/stitch-design/MAL-2026-6456.json"